The 80/20 Rule for Information Security
From The Team at MicroSolved
MicroSolved, Inc. (MSI) has developed the 80/20 Rule of Information Security that proposes the concept that 80% of an organizations’ real information security comes from only 20% of the assets and effort put into the program. These 13 security projects will give your organization the most effective information security coverage for the least expenditure of time and resources. These projects, once completed, should allow CIO’s to create an effective, efficient, and standards-based approach to information security…
SyferLock GridGuard Live On Infosec Island
Press Release
Infosec Island, the new community for IT and information security professionals, today announced that its new enhanced authentication service based on the SyferLock™ GridGuard™ solution, is now live. Deploying this technology provides Infosec Island members with the option to login with a very high level of security for confidential business, personal or security-related communications. SyferLock’s GridOne authentication is available on Infosec Island to all registered members, and membership is free.
How A Security Company Applies Security
By Larry Ketchersid, Chairman and CEO at MediaSourcery
Similar to security assessments, network architecture designs and other projects, a development project, such as this one involves the exchange of confidential data, including in this case, intellectual property designs, requirements documents, test plans, code fragments and road maps. We could have chose to exchange these documents over email, or printed them out and sent them next day parcel post. Instead, we ate our own dogfood and utilized IslandPKI encrypted document and message transfer…
WireHead Security Partners With NCICU
From PRWeb
WireHead SecurityTM, an information security services firm providing customers with solutions to strengthen internal security and risk management, today announced a partnership agreement with the North Carolina Independent Colleges and Universities (NCICU), under which member institutions can take advantage of discounted service pricing. NCICU is comprised of North Carolina’s 36 private, non-profit liberal arts, comprehensive, and research colleges and universities accredited by the Southern Association of Colleges and Schools.
InfosecIsland.com Network Acquires ISR
Press Release
Infosec IslandTM, the new online community designed especially for IT and network professionals who manage information security, risk and compliance issues, today acquired Information-Security-Resources.com, one of the leading online news portals addressing security issues. ISR brings a number of high profile authors to Infosec Island, who will regularly offer their rich experience and broad set of security expertise for the benefit of the community. The combination of the two communities also allows for Infosec Island’s free and premium tools to be made available to ISR’s international audience – adding further value to their existing readership.
Top Ten Security SNAFU’s Of The Decade
By Robert Siciliano, ID Theft Expert and Security Consultant to Intelius.com
In the last decade we have seen technological breakthroughs unlike any other. In response we have seen a tremendous rise in fraud. The reason? The speed of the conveniences technology have far outpaced the security of technology. Here’s a list of the top ten of the last ten years…
Ten Most Damaging Data Breaches of 2009
By Laton McCartney, Editor at CIOZone
Every week for the past four years the Privacy Rights Clearing House has been chronicling data breaches on a weekly basis. “These are the mega-breaches that can skew the figures in terms of the number of people victimized,” says Paul Stephens, PRCH’s director of policy and advocacy. Here are the ten biggest, most damaging and most embarrassing breaches to date this year.
Report: Data Breaches Hike Fraud Risk 400%
By Doug Pollack, Chief Marketing Officer for ID Experts
This report should be heeded by those banks, health care organizations, government agencies, insurance companies and others that we entrust with our social security and checking account numbers, birth dates and mothers’ maiden names, and in some cases our personal health information.
Tools for Quantifying Risk Exposure are Few
By Doug Pollack, Chief Marketing Officer for ID Experts
The seeming inconsistency between the perception of being immune from data breach risks with the rapid growth in data breach incidents, led us to think about whether organizations can actually quantify their level of breach risk. We were somewhat surprised that there is not much available to organizations to help them in scoring their vulnerability.
PCI DSS Legitimizes Conflicts of Interest
By Rachel James, Author and Cybercrime Authority at ID Experts
The rules and requirements for auditors reveal a number of potential conflicts of interest that could arise between an auditor and the entity it’s assessing. For example, many security auditors also make security products. The rules state that a security company will not use its status as auditor to market its products to companies it audits, but if the auditor should happen to find that the client would benefit from its product, it must also tell the client about competing products.
